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LISTING OF CLAIMS 

The following listing of claims replaces all prior versions of the claims and all prior 
listings of the claims in the present application. 

1 . (previously presented) A Montgomery modular multiplier of a public-key 
cryptographic system that calculates a value congruent to "ABR" 1 " (mod M) used in the 
cryptographic system, where A and B are input n-bit numbers, R" ! is an inverse number of R 
modular-multiplied for "mod M", and M is a modulus, the Montgomery modular multiplier 
comprising: 

an A-register storing a bit value aj (where T denotes an integer in the range of 0 to n-1) 
of the number A, which is smaller than the modulus M; 

a B-register storing a bit value bj of the number B, which is smaller than the modulus M; 

an M-register storing a bit value mi of the modulus M, which is an odd number; 

a bjA calculation logic circuit multiplying the number A by the bit value bi to obtain bjA; 

a qi calculation logic circuit solving a Boolean logic equation "so XOR c 0 XOR (bi AND 
ao)'\ where s 0 is the least significant bit (LSB) of a sum S, c 0 is the LSB of a carry C, bj is the bit 
value of the number B, and ao is the LSB of the number A, to obtain a bit value qu 

a qjM calculation logic circuit multiplying the modulus M by the bit value qi to obtain 

qiM; 

a 4-2 compressor performing 'n' additions on the carry C, the sum S, the bjA, and the qjM 
to obtain interim values and summing the interim values to obtain a result using a carry 
propagation adder in response to a carry propagation adder signal; 

an S-register updating a bit value Si of the sum S and storing the updated bit value; and 
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a C-register updating a bit value Cj of the carry C and storing the updated bit value. 

2. (previously presented) The Montgomery modular multiplier of claim 1, wherein the 
4-2 compressor comprises: 

a first full adder unit summing a bit value bjai of the bjA, a bit value Si+i of the sum S, and 
the bit value Cj of the carry C to obtain a carry cA\ and a sum sAj; 

a multiplexer (MUX) unit selectively outputting either a bit value q\m\ of the qjM, a carry 
cAm, and the sum sAj or the bit value Sj+i of the sum S, the bit value c* of the carry C, and a bit 
value Cm of the carry C, in response to the carry propagation adder signal; and 

a second full adder unit performing 'n' additions on the bit value q\m\ of qiM, the 
carry cAm, and the sum sAj to calculate interim bit values S\ of the sum S and Cj of the carry C, 
when the carry propagation adder signal is in an inactive state, and summing the bit value Sj+i of 
the sum S, the bit value Cj of the carry C, and the bit value Cm of the carry C to obtain final 
results of the sum S and the carry C, when the carry propagation adder signal is in an active state. 

3. (previously presented) The Montgomery modular multiplier of claim 2, wherein a 
carry save adder structure is a 4-input 2-output structure, in which the first and second full adder 
units operate when the carry propagation adder signal is in the inactive state. 

4. (previously presented) The Montgomery modular multiplier of claim 2, wherein a 
carry propagation adder structure is a 3-input 2-output structure, in which only the second full 
adder unit operates when the carry propagation adder signal is in the active state. 
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5. (original) The Montgomery modular multiplier of claim 2, wherein the LSB of the 
carry cAj.j and the LSB of the carry c^i are in a first logic state. 

6. (previously presented) The Montgomery modular multiplier of claim 2, wherein the 
most significant bit (MSB) of the sum S is equal to the bit value cA n -i at a clock pulse before the 
carry propagation adder signal is activated. 

7. (previously presented) A method of performing a Montgomery modular 
multiplication in a Montgomery modular multiplier of a public-key cryptographic system, in 
which the Montgomery modular multiplier includes registers for storing bit values aj, bi, mi, Cj, 
and Sj (where T denotes an integer in the range of 0 to n-1) of a word A, a word B, a 
modulus M, a carry C, and a sum S, respectively, and calculates a value congruent to "ABR" 1 " 
(mod M), where A and B are input n-bit numbers, R" 1 is an inverse number of R modular- 
multiplied for "mod M", and M is a modulus, the method comprising: 

receiving the number A, the number B, and the modulus M; 

multiplying the number A by a bit value bj to obtain each bit of bjA; 

solving a Boolean logic equation "so XOR Co XOR (bj AND ao)'\ where so is the least 
significant bit (LSB) of a sum S, Co is the LSB of a carry C, bi is the bit value of the number B, 
and ao is the LSB of the number A, to obtain a bit value qj; 

multiplying the modulus M by the bit value qi to obtain each bit of qjM; 

performing 'n' additions on the carry C, the sum S, the bjA, and the qjM to obtain interim 
values for each bit of the sum S and the carry C in a carry save adder structure, in response to a 
carry propagation adder signal; and 
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summing the interim values to obtain the final results of the sum S and the carry C in a 
carry propagation adder structure, in response to the carry propagation adder signal. 

8. (original) The method of claim 7, wherein the number A is smaller than the 
modulus M. 

9. (original) The method of claim 7, wherein the number B is smaller than the 
modulus M. 

1 0. (original) The method of claim 7, wherein the modulus M is an odd number. 

1 1 . (previously presented) The method of claim 7, wherein the interim values and final 
results of the sum S and the interim values and final results of the carry C are calculated by: 

summing a bit value b&\ of the bjA, a bit value Sj+i of the sum S, and a bit value Cj of the 
carry C to obtain a carry cAj and a sum sAj; 

selectively outputting either a bit value q\m\ of the qjM, a carry cAm, and the sum sAj or 
the bit value Si+i of the sum S, the bit value Cj of the carry C, and a bit value C\.\ of the carry C, in 
response to the carry propagation adder signal; 

performing V additions on the bit value q\m\ of the qjM, the carry cAm, and the sum sAj 
to calculate interim bit values S\ of the sum S and Cj of the carry C, when the carry propagation 
adder signal is in an inactive state; and 
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summing the bit value Sj+j of the sum S, the bit value Ci of the carry C, and the bit 
value cm of the carry C to obtain final results of the sum S and the carry C, when the carry 
propagation adder signal is in an active state. 

12. (previously presented) The method of claim 7, wherein the carry save adder 
structure is a 4-input 2-output structure, in which the interim values of the sum S and the carry C 
are obtained from the bjA and the qiM when the carry propagation adder signal is in an inactive 
state. 

13. (previously presented) The method of claim 7, wherein the carry propagation adder 
structure is a 3-input 2-output structure, in which the final results of the sum S and the carry C 
are obtained from the interim values of the sum S and the carry C when the carry propagation 
adder signal is in an active state. 

14. (previously presented) The method of claim 11, wherein the LSB of the carry cAj.i 
and the LSB of the carry cm are in a first logic state. 

15. (previously presented) The method of claim 11, wherein the most significant bit 
(MSB) of the sum S is equal to the bit value cA n -i at a clock pulse before the carry propagation 
adder signal is activated. 
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1 6. (previously presented) A method of performing radix 2 N Montgomery modular 
multiplication in a public-key cryptographic system, where N is greater than or equal to 1, the 
method comprising: 

receiving a multiplicand, a modulus, and a multiplier; 

performing carry save addition using first and second full adder units on at least four 
inputs related to the multiplicand, modulus, and multiplier to generate a result in redundant 
representation; and 

performing carry propagation addition using the second full adder unit to generate a 
result in normal representation in response to a carry propagation adder signal. 

1 7. (previously presented) A Montgomery modular multiplier of a public- key 
cryptographic system, comprising: 

a multiplicand register, storing a bit value aj of a number A; 
a modulus register, storing a bit value m\ of a modulus M; 
a multiplier register, storing a bit value bj of a number B; 

a biA calculation logic circuit multiplying the number A by a bit value b\ to obtain each 
bit of bjA; 

a qj calculation logic circuit solving a Boolean logic equation "so XOR Co XOR (bj AND 
ao)'\ where so is the least significant bit (LSB) of a sum S, c 0 is the LSB of a carry C, bj is the bit 
value of the number B, and ao is the LSB of the number A, to obtain a bit value q\ (where T 
denotes an integer in the range of 0 to n-1); 

a qjM calculation logic circuit multiplying the modulus M by the bit value qj to obtain 
each bit of qjM; and 
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a t-s compressor, wherein t>3 and s>l, performing V additions on the carry C, the 
sum S, the bjA, and the qM to obtain interim values for each bit of the sum S and the carry C in 
a carry save adder structure and summing the interim values to obtain final results of the sum S 
and the carry C in a carry propagation adder structure, in response to a carry propagation adder 
signal. 

18. (previously presented) A system embodying a Montgomery modular multiplier, the 
system comprising: 

an A-register storing a bit value aj (where T denotes an integer in the range of 0 to n-1) 
of an n-bit number A; 

a B-register storing a bit value bj of an n-bit number B; 
an M-register storing a bit value m x of an n-bit modulus M; 

a bjA calculation logic circuit multiplying the number A by the bit value bi to obtain bjA; 

a qi calculation logic circuit solving a Boolean logic equation "s 0 XOR Co XOR (bj AND 
ao)'\ where s 0 is the least significant bit (LSB) of a sum S, c 0 is the LSB of a carry C, bj is the bit 
value of the number B, and ao is the LSB of the number A, to obtain a bit value qu 

a qjM calculation logic circuit multiplying the modulus M by the bit value q\ to obtain 

qM; 

a compressor performing 'n' additions on the carry C, the sum S, the bjA, and the qM to 
obtain interim values and summing the interim values to obtain a result using a carry propagation 
adder in response to a carry propagation adder signal; 

an S-register updating a bit value s\ of the sum S and storing the updated bit value; and 
a C-register updating a bit value q of the carry C and storing the updated bit value; 
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wherein given that the number A is smaller than the modulus M, the number B is smaller 
than the modulus M, the modulus M is odd, and R* 1 is an inverse number of R modular- 
multiplied for "mod M", the system calculates a value congruent to "ABR' 1 " (mod M). 

19. (previously presented) The system of claim 18, wherein the system comprises a 
public-key cryptographic system. 

20. (previously presented) The system of claim 18, wherein the system is a public-key 
cryptographic system. 

2 1 . (previously presented) The system of claim 1 8, wherein the value congruent to 
"ABR" 1 " (mod M) is used in a public-key cryptographic system. 

22. (previously presented) The system of claim 18, wherein the value congruent to 
"ABR" 1 " (mod M) is used in the system as a cryptographic key. 
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